$ rpki-client -vvf rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft File: at5OHE4cCb8U36pMPWAPQY4X5y4.mft (raw, json) Hash identifier: ZeHG188UZiwGQJ0j+xfDin0Eu8H17rKxUc6jvf7ztVA= Subject key identifier: 71:D1:76:89:73:AD:B6:33:24:FF:B4:5A:63:41:11:2D:F0:FC:CB:6A Authority key identifier: 6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E Certificate issuer: /CN=A918429B/serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E Certificate serial: 3522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft Manifest number: 3522 Signing time: Tue 24 Mar 2026 14:51:12 +0000 Manifest this update: Tue 24 Mar 2026 14:51:11 +0000 Manifest next update: Tue 31 Mar 2026 14:51:11 +0000 Files and hashes: 1: at5OHE4cCb8U36pMPWAPQY4X5y4.crl (hash: PER0EifrwWSGAMLJVoSgJopwynLRi34USkZJ5GCPuag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:51:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13602 (0x3522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918429B, serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E Validity Not Before: Mar 24 14:51:11 2026 GMT Not After : Mar 31 14:51:11 2026 GMT Subject: CN=69c2a4df-52c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c8:ad:f1:cf:05:8b:c1:c5:8d:ba:7f:e6:d5: 34:51:f4:c6:fd:17:65:f1:0c:aa:f1:15:9b:57:1e: 59:8e:87:58:22:78:15:b1:16:4f:34:a5:9a:c9:b5: 55:8f:81:ff:ae:4f:d1:59:b9:22:3d:3a:91:83:d6: f5:46:44:67:cf:52:37:8c:1b:0e:fe:d9:85:de:38: 1d:43:a7:61:a3:ba:7f:14:91:74:1b:55:25:b3:ed: b0:bf:12:04:4e:22:49:3d:1c:db:09:da:19:21:0c: e5:d7:9a:5a:27:3b:9c:7f:aa:22:40:36:0c:07:f9: 12:2e:0f:f0:c8:ae:59:f4:22:0a:03:59:55:fe:5d: 94:77:e7:1c:3e:49:1e:08:a2:42:ff:31:e4:c0:c7: 69:1a:9e:c8:0e:48:bd:15:d0:87:b9:b9:55:bf:90: ee:49:f4:73:08:e8:22:cd:0a:62:c2:d2:3b:26:b0: 5b:b4:e6:c0:0d:61:c8:ac:7b:12:b4:99:98:cf:46: 85:fd:a8:74:72:6d:ef:c4:a4:e7:b0:7b:5a:0c:27: 86:2b:0a:6f:de:6b:4b:16:32:7e:62:a1:b7:00:af: 2e:05:3a:73:04:5f:93:14:c6:36:3e:02:8c:b5:2a: 81:e0:72:39:67:88:03:14:75:85:68:55:91:d3:9e: 9f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D1:76:89:73:AD:B6:33:24:FF:B4:5A:63:41:11:2D:F0:FC:CB:6A X509v3 Authority Key Identifier: keyid:6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:90:be:da:eb:e9:24:31:4d:7a:c9:a7:37:53:e1:e5:2d:ca: 1b:13:c1:41:65:25:0a:0e:2d:e2:49:f0:c2:c1:ef:f3:a4:ce: af:c6:e8:e0:f7:2c:7e:2b:75:5f:e2:70:3c:95:da:9f:af:bc: 89:72:19:d7:1a:ac:04:ce:a0:21:65:a2:ad:3e:13:c2:86:b5: d1:18:e4:38:af:4c:f0:90:21:2f:b6:f7:5b:50:11:f7:70:15: bd:c0:7d:d4:6d:a4:80:62:2f:86:ce:9a:ae:b0:46:ad:94:d8: 20:6f:9b:c3:01:b8:c0:e4:71:a6:f5:88:b9:74:39:ad:83:d5: e7:df:9a:0f:01:b8:bb:07:2d:26:bb:3e:6d:ed:cc:48:cf:ad: 8e:51:72:4f:61:a2:fe:92:fe:c3:31:d6:52:16:58:3c:3e:e3: 65:ab:39:1e:9b:e9:a0:1a:c7:eb:0e:5d:02:be:91:83:82:c0: 8e:86:7b:e2:55:de:f3:f1:53:3f:14:2a:ce:3c:5f:fb:af:6c: ee:8a:77:82:04:6b:be:4b:13:65:a2:a3:66:f8:7a:cb:bd:ec: dd:8a:7f:3b:d9:c8:88:de:ec:1c:4b:24:94:f5:2b:3a:2f:9e: a9:f6:95:40:fb:35:4e:e8:bc:68:1a:ff:ee:e3:3e:f5:b9:5a: 90:c2:28:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyOUIxMTAvBgNVBAUTKDZBREU0RTFDNEUxQzA5QkYxNERGQUE0QzNENjAwRjQx OEUxN0U3MkUwHhcNMjYwMzI0MTQ1MTExWhcNMjYwMzMxMTQ1MTExWjAYMRYwFAYD VQQDEw02OWMyYTRkZi01MmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkMit8c8Fi8HFjbp/5tU0UfTG/Rdl8Qyq8RWbVx5ZjodYIngVsRZPNKWaybVV j4H/rk/RWbkiPTqRg9b1RkRnz1I3jBsO/tmF3jgdQ6dho7p/FJF0G1Uls+2wvxIE TiJJPRzbCdoZIQzl15paJzucf6oiQDYMB/kSLg/wyK5Z9CIKA1lV/l2Ud+ccPkke CKJC/zHkwMdpGp7IDki9FdCHublVv5DuSfRzCOgizQpiwtI7JrBbtObADWHIrHsS tJmYz0aF/ah0cm3vxKTnsHtaDCeGKwpv3mtLFjJ+YqG3AK8uBTpzBF+TFMY2PgKM tSqB4HI5Z4gDFHWFaFWR056fgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHRdolz rbYzJP+0WmNBES3w/MtqMB8GA1UdIwQYMBaAFGreThxOHAm/FN+qTD1gD0GOF+cu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI5Qi9CNjAwNjNBQzFE OTcxMUUyQkEyRTQ1ODEwOEIwMkNEMi9hdDVPSEU0Y0NiOFUzNnBNUFdBUFFZNFg1 eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0NU9IRTRjQ2I4VTM2cE1QV0FQUVk0WDV5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI5Qi9CNjAwNjNBQzFEOTcxMUUyQkEyRTQ1ODEwOEIwMkNEMi9hdDVPSEU0Y0Ni OFUzNnBNUFdBUFFZNFg1eTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALZC+2uvpJDFNesmnN1Ph5S3KGxPBQWUlCg4t4knwwsHv86TOr8bo4Pcsfit1 X+JwPJXan6+8iXIZ1xqsBM6gIWWirT4Twoa10RjkOK9M8JAhL7b3W1AR93AVvcB9 1G2kgGIvhs6arrBGrZTYIG+bwwG4wORxpvWIuXQ5rYPV59+aDwG4uwctJrs+be3M SM+tjlFyT2Gi/pL+wzHWUhZYPD7jZas5HpvpoBrH6w5dAr6Rg4LAjoZ74lXe8/FT PxQqzjxf+69s7op3ggRrvksTZaKjZvh6y73s3Yp/O9nIiN7sHEsklPUrOi+eqfaV QPs1Tui8aBr/7uM+9blakMIobw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:50:32 2026 by rpki-client